CVE-2002-1872 in SQL Server

Riassunto

di MITRE

Microsoft SQL Server 6.0 through 2000, with SQL Authentication enabled, uses weak password encryption (XOR), which allows remote attackers to sniff and decrypt the password.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• Prenotare: 29/06/2005
• Divulgazione: 31/12/2002
• Moderazione: accettato
• Voce: VDB-19514
• CPE: pronto
• CWE: CWE-311 (confermato)
• CVSS: 5.3 (VulDB)
• EPSS: 0.00969
• KEV: no
• Attività: molto basso
• Settore: Energy, Agriculture, ...

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2002-1872
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2002-1872
• CVE Details: https://www.cvedetails.com/cve/CVE-2002-1872/